cc9876ddf8
- Skip test_client_receives_servers_data failing with openssl 3.6.0 and rewrite tests exclusion to be more atomic
Markéta Machová2025-10-08 08:39:32 +00:00
77b3221914
Accepting request 1307969 from devel:languages:python
Ana Guerrero2025-09-30 15:48:22 +00:00
06992620df
- update to 25.3.0: * Maximum supported cryptography version is now 46.x. * The minimum cryptography version is now 45.0.7. * pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by default, matching CPython's behavior. * Added OpenSSL.SSL.Context.clear_mode. * Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS 1.3 ciphers. * Added OpenSSL.SSL.Connection.set_info_callback
Dirk Mueller2025-09-29 19:11:53 +00:00
8576d77061
- update to 25.1.0: * Attempting using any methods that mutate an OpenSSL.SSL.Context after it has been used to create an OpenSSL.SSL.Connection will emit a warning. In a future release, this will raise an exception. * cryptography maximum version has been increased to 45.0.x.
Dirk Mueller2025-07-12 17:23:58 +00:00
b1405533ee
- dont use suse version for the dist info handling as people can build with newer setuptools on older distros
Matej Cepl2025-04-19 16:00:03 +00:00
4a321476f3
Accepting request 1270618 from home:darix:apps
Matej Cepl2025-04-19 16:00:03 +00:00
9e2c2e4277
Accepting request 1266172 from devel:languages:python
Ana Guerrero2025-04-16 18:37:09 +00:00
5884ab39f0
Accepting request 1266172 from devel:languages:python
Ana Guerrero2025-04-16 18:37:09 +00:00
28a1e305e8
- Wrap the metadata directory name in a distro-based conditional
Markéta Machová2025-04-01 13:15:42 +00:00
4cfe7fbbfb
- Wrap the metadata directory name in a distro-based conditional
Markéta Machová2025-04-01 13:15:42 +00:00
fd776f2a68
Accepting request 1241218 from home:ecsos:python
Steve Kowalik2025-01-30 01:18:25 +00:00
3799fc3dc0
Accepting request 1237806 from devel:languages:python
Ana Guerrero2025-01-15 16:42:18 +00:00
e37505bb6b
Accepting request 1237806 from devel:languages:python
Ana Guerrero2025-01-15 16:42:18 +00:00
28aa3af438
- Do not build tests noarch: they refer to %__isa, which differs per architecture, invalidating the noarch option. Fixes build with rpm 4.20.
Nico Krapp2025-01-14 13:26:13 +00:00
9c647756b3
Accepting request 1237721 from home:dimstar:Factory
Nico Krapp2025-01-14 13:26:13 +00:00
ed2ff5e79d
- 24.2.1: * Deprecated OpenSSL.crypto.X509Req, OpenSSL.crypto.load_certificate_request, OpenSSL.crypto.dump_certificate_request. Instead, cryptography.x509.CertificateSigningRequest,s cryptography.x509.CertificateSigningRequestBuilder,s cryptography.x509.load_der_x509_csr,s or cryptography.x509.load_pem_x509_csr should be used. * Added type hints for the SSL module. #1308. * Changed OpenSSL.crypto.PKey.from_cryptography_key to accept public and private EC, ED25519, ED448 keys
Markéta Machová2024-07-24 10:28:52 +00:00
3bceeefd81
Accepting request 1189233 from system:homeautomation:home-assistant:unstable
Markéta Machová2024-07-24 10:28:52 +00:00
c951fa72df
Accepting request 1158475 from devel:languages:python
Ana Guerrero2024-03-18 15:44:24 +00:00
21c17a15d8
Accepting request 1158475 from devel:languages:python
Ana Guerrero2024-03-18 15:44:24 +00:00
1d6a5e867b
- update to 24.1.0: * Removed the deprecated OpenSSL.crypto.PKCS12 and OpenSSL.crypto.NetscapeSPKI. OpenSSL.crypto.PKCS12 may be replaced by the PKCS#12 APIs in the cryptography package.
Dirk Mueller2024-03-16 13:06:38 +00:00
f841d2011a
- update to 24.1.0: * Removed the deprecated OpenSSL.crypto.PKCS12 and OpenSSL.crypto.NetscapeSPKI. OpenSSL.crypto.PKCS12 may be replaced by the PKCS#12 APIs in the cryptography package.
Dirk Mueller2024-03-16 13:06:38 +00:00
225bd52449
Accepting request 1142651 from devel:languages:python
Ana Guerrero2024-01-30 17:24:28 +00:00
8365299f9f
Accepting request 1142651 from devel:languages:python
Ana Guerrero2024-01-30 17:24:28 +00:00
8e26884f20
- update to 24.0.0: * Added OpenSSL.SSL.Connection.get_selected_srtp_profile to determine which SRTP profile was negotiated. #1279.
Dirk Mueller2024-01-29 21:23:44 +00:00
aa28064ca4
- update to 24.0.0: * Added OpenSSL.SSL.Connection.get_selected_srtp_profile to determine which SRTP profile was negotiated. #1279.
Dirk Mueller2024-01-29 21:23:44 +00:00
92216e2e79
Accepting request 1129059 from devel:languages:python
Ana Guerrero2023-11-28 21:18:04 +00:00
b26d61dcf7
Accepting request 1129059 from devel:languages:python
Ana Guerrero2023-11-28 21:18:04 +00:00
91036534b4
- update to 23.3.0: * Dropped support for Python 3.6. * The minimum `cryptography version is now 41.0.5. * Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years. * Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers. * Deprecated OpenSSL.crypto.PKCS12 (which was intended to have been deprecated at the same time as OpenSSL.crypto.load_pkcs12). * Deprecated OpenSSL.crypto.NetscapeSPKI. * Deprecated OpenSSL.crypto.CRL * Deprecated OpenSSL.crypto.Revoked * Deprecated OpenSSL.crypto.load_crl and OpenSSL.crypto.dump_crl * Deprecated OpenSSL.crypto.sign and OpenSSL.crypto.verify * Deprecated OpenSSL.crypto.X509Extension * Changed OpenSSL.crypto.X509Store.add_crl to also accept * cryptography's x509.CertificateRevocationList arguments in addition * to the now deprecated OpenSSL.crypto.CRL arguments. * Fixed test_set_default_verify_paths` test so that it is skipped if no network connection is available. - Inject multibuild to avoid a build loop. python-pyOpenSSL-always-overflow.patch - fixed doc generation -Add bug-lp-1265482.diff; fix testsuite for SLE11 (bnc#855666)
Dirk Mueller2023-11-27 08:55:08 +00:00
a5387be00c
- update to 23.3.0: * Dropped support for Python 3.6. * The minimum `cryptography version is now 41.0.5. * Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years. * Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers. * Deprecated OpenSSL.crypto.PKCS12 (which was intended to have been deprecated at the same time as OpenSSL.crypto.load_pkcs12). * Deprecated OpenSSL.crypto.NetscapeSPKI. * Deprecated OpenSSL.crypto.CRL * Deprecated OpenSSL.crypto.Revoked * Deprecated OpenSSL.crypto.load_crl and OpenSSL.crypto.dump_crl * Deprecated OpenSSL.crypto.sign and OpenSSL.crypto.verify * Deprecated OpenSSL.crypto.X509Extension * Changed OpenSSL.crypto.X509Store.add_crl to also accept * cryptography's x509.CertificateRevocationList arguments in addition * to the now deprecated OpenSSL.crypto.CRL arguments. * Fixed test_set_default_verify_paths` test so that it is skipped if no network connection is available. - Inject multibuild to avoid a build loop. python-pyOpenSSL-always-overflow.patch - fixed doc generation -Add bug-lp-1265482.diff; fix testsuite for SLE11 (bnc#855666)
Dirk Mueller2023-11-27 08:55:08 +00:00
e6e57d5255
- update to 23.2.0: * Removed `X509StoreFlags.NOTIFY_POLICY. * cryptography maximum version has been increased to 41.0.x. * Invalid versions are now rejected in OpenSSL.crypto.X509Req.set_version. * Added X509VerificationCodes to OpenSSL.SSL`.
Dirk Mueller2023-06-19 20:26:28 +00:00
9df90c19ae
- update to 23.2.0: * Removed `X509StoreFlags.NOTIFY_POLICY. * cryptography maximum version has been increased to 41.0.x. * Invalid versions are now rejected in OpenSSL.crypto.X509Req.set_version. * Added X509VerificationCodes to OpenSSL.SSL`.
Dirk Mueller2023-06-19 20:26:28 +00:00
a0d6178494
- update to 23.1.1: * Worked around an issue in OpenSSL 3.1.0 which caused X509Extension.get_short_name to raise an exception when no short name was known to OpenSSL.
Dirk Mueller2023-03-28 15:40:57 +00:00
3916b0eb63
- update to 23.1.1: * Worked around an issue in OpenSSL 3.1.0 which caused X509Extension.get_short_name to raise an exception when no short name was known to OpenSSL.
Dirk Mueller2023-03-28 15:40:57 +00:00
93b1e4678c
- update to 23.1.0: * `cryptography maximum version has been increased to 40.0.x. * Add OpenSSL.SSL.Connection.DTLSv1_get_timeout and OpenSSL.SSL.Connection.DTLSv1_handle_timeout to support DTLS timeouts #1180
Dirk Mueller2023-03-27 07:55:49 +00:00
d5a90261e4
- update to 23.1.0: * `cryptography maximum version has been increased to 40.0.x. * Add OpenSSL.SSL.Connection.DTLSv1_get_timeout and OpenSSL.SSL.Connection.DTLSv1_handle_timeout to support DTLS timeouts #1180
Dirk Mueller2023-03-27 07:55:49 +00:00
f0708814a1
- update to 23.0.0: * Add `OpenSSL.SSL.X509StoreFlags.PARTIAL_CHAIN constant to allow for users to perform certificate verification on partial certificate chains. * cryptography` maximum version has been increased to 39.0.x. - drop pyOpenSSL-pr1158-conditional-__all__.patch (upstream)
Dirk Mueller2023-01-02 18:49:48 +00:00
e6858ca252
- update to 23.0.0: * Add `OpenSSL.SSL.X509StoreFlags.PARTIAL_CHAIN constant to allow for users to perform certificate verification on partial certificate chains. * cryptography` maximum version has been increased to 39.0.x. - drop pyOpenSSL-pr1158-conditional-__all__.patch (upstream)
Dirk Mueller2023-01-02 18:49:48 +00:00
b067fdba7d
Accepting request 1030427 from home:bnavigator:branches:devel:languages:python
Matej Cepl2022-10-24 21:44:16 +00:00
d7359e433c
Accepting request 1030427 from home:bnavigator:branches:devel:languages:python
Matej Cepl2022-10-24 21:44:16 +00:00
fcf55eaaab
- update to 22.1.0: * Remove support for SSLv2 and SSLv3. * The minimum `cryptography version is now 37.0.2. * The OpenSSL.crypto.X509StoreContextError exception has been refactored, changing its internal attributes. * Add OpenSSL.SSL.Connection.set_verify and OpenSSL.SSL.Connection.get_verify_mode to override the context object's verification flags. * Add OpenSSL.SSL.Connection.use_certificate and OpenSSL.SSL.Connection.use_privatekey` to set a certificate per connection (and not just per context)
Dirk Mueller2022-09-29 19:34:28 +00:00
824a041432
- update to 22.1.0: * Remove support for SSLv2 and SSLv3. * The minimum `cryptography version is now 37.0.2. * The OpenSSL.crypto.X509StoreContextError exception has been refactored, changing its internal attributes. * Add OpenSSL.SSL.Connection.set_verify and OpenSSL.SSL.Connection.get_verify_mode to override the context object's verification flags. * Add OpenSSL.SSL.Connection.use_certificate and OpenSSL.SSL.Connection.use_privatekey` to set a certificate per connection (and not just per context)
Dirk Mueller2022-09-29 19:34:28 +00:00
76cf59019d
- Add check_inv_ALPN_lists.patch checks for invalid ALPN lists before calling OpenSSL (gh#pyca/pyopenssl#1056).
Matej Cepl2021-10-30 19:09:36 +00:00
af7c9ca24f
- Add check_inv_ALPN_lists.patch checks for invalid ALPN lists before calling OpenSSL (gh#pyca/pyopenssl#1056).
Matej Cepl2021-10-30 19:09:36 +00:00
032b476820
- update to 21.0.0: - The minimum `cryptography version is now 3.3. - Drop support for Python 3.5 - Raise an error when an invalid ALPN value is set. - Added OpenSSL.SSL.Context.set_min_proto_version and OpenSSL.SSL.Context.set_max_proto_version - Updated to_cryptography and from_cryptography methods to support an upcoming release of cryptography` without raising deprecation warnings.
Dirk Mueller2021-10-26 20:28:09 +00:00
feb56916b6
- update to 21.0.0: - The minimum `cryptography version is now 3.3. - Drop support for Python 3.5 - Raise an error when an invalid ALPN value is set. - Added OpenSSL.SSL.Context.set_min_proto_version and OpenSSL.SSL.Context.set_max_proto_version - Updated to_cryptography and from_cryptography methods to support an upcoming release of cryptography` without raising deprecation warnings.
Dirk Mueller2021-10-26 20:28:09 +00:00
Ana Guerrero
Markéta Machová
Dirk Mueller
Dominique Leuenberger
Matej Cepl
Steve Kowalik
Nico Krapp